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Method for the exchange of personal information in a step-by-step fashion in non-trusted 
peer-to-peer environments 

In public arrangements or on public places there is an increasing possibility 
of coming into contact with other persons over radio networks. In particular with so-called 
peer-to-peer networks, often a mutual identification is necessary. A typical scenario is, for 
example, the setting up of contact with likeminded persons in an airport lounge. Over 
5 mobile devices, like for example PDAs (palmtop computers) or smartphones (intemet- 
enabled handles) it is possible to identify such persons over a short-distance radio link (for 
example Bluetooth or IEEE 802.1 1 wireless LAN) and mutually exchange personal 
information. At present one of the two persons who want to exchange data, must pay in 
advance and first transmit his personal data to the other person. Since there is still no bond 

10 of trust between the persons, this person runs the risk of the other person receiving his data, 
but on the other hand not revealing her personal data. A possibility of limiting this risk 
comprises revealing details of the personal profile only step by step. For this purpose the 
mobile devices often offer the possibility of creating personal user profiles, which can be 
adapted in their degree of detail with flags depending on the communication partner. The 

15 risk of the one-sided revealing of basic information, however, continues to exist. 

Here the invention wants to provide a remedy. It is an object of the invention 
to provide a method for the step-by-step exchange of personal information in non-trusted 
peer-to-peer environments, which ensures a balanced spreading of risk over the two 
communication partners. According to the invention, this object is achieved by the fact that 

20 the information is divided into several independent sections, which are mutually exchanged 
step by step between at least two communication partners. 

The invention provides a method for the step-by-step exchange of personal 
information in non-trusted peer-to-peer environments, which ensures a balanced spreading 
of risks over the two communication partners. With the mutual exchange of independent 

25 sections of information it is ensured that these sections merge evenly into one context with 
the two communication partners. 
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In a further aspect of the invention the text representation of the information 
is converted into a graphics display before the segmenting. As a result, system-independent 
readability of the information is ensured after composition of the individual sections. 
Furthermore, determining the missing information sections via algorithmic methods is 
5 prevented. 

In an embodiment of the invention, the segmenting and the exchange of the 
information take place in such a way that each information unit provides for itself an 
information contribution recognizable to the user. This makes an evaluation possible of the 
received section information by the recipient, as a result of which a balanced information 
10 exchange is promoted. 

Preferably, the graphics display of the information is divided into n rows and 
m columns, from which a matrix of n x m fields results. This enables the combining of the 
graphic individual sections to a puzzle. 

Advantageously, the grid of the matrix is agreed upon between the 
15 communication partners before the segmenting of the information. As a result it is ensured 
that the information segmenting takes place homogeneously on both pages, so that the 
exchange process is harmonized. Furthermore, the visualization of the information 
combined step by step is facilitated. 

Preferably the grid of the matrix is standardized. As a result of this, a 
20 previous agreement on the grid is unnecessary, so that information exchange is accelerated. 

In a further aspect of the invention, each information fragment has its 
position in the matrix attached to it. As a result of this, the composition of the total 
information is simplified. 

In an embodiment of the invention, either partner can abort information 
25 exchange at any time. As a result, each partner is allowed to terminate the transmitting of 
his personal information, for example in case of strongly differing information content of 
the merging information fragments. 

In a further embodiment of the invention the information sections not yet 
transmitted can be transmitted in one step at any time. This enables the acceleration of the 
30 information exchange at any time. 

Other further embodiments and designs of the invention are indicated in the 
remaining dependent claims. An example of embodiment of the invention is represented in 
the drawings and is described in detail hereinafter. It shows in: 
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Fig. 1 the flow chart of the method according to invention; 

Fig. 2 steps 1 to 3 the merging of information divided into 42 sections: 

Fig. 3 steps 4 to 6 of the information merging from Fig. 2; 

Fig. 4 steps 7 to 9 of the information merging from Fig. 2; 

Fig. 5 steps 22 to 24 of the information merging from Fig. 2; 

Fig. 6 steps 37 to 39 of the information merging from Fig. 2 and 

Fig. 7 steps 40 to 42 of the information merging from Fig. 2 



10 In the example of application in accordance with Fig. 1, A and B agree to 

mutually exchange personal information. Firstly A conveys to B, what size (pixel 
width/height) the total picture should have, which is to be supplied by B to A. B does this in 
analogous fashion. Following the definition of the pixel grid of the total picture, A and B 
agree on the number of rows (n) and columns (m), into which the respective picture is to be 

15 divided. On the basis of this defined data now the conversion of the respective information 
into a graphics display takes place with A and B. If the data is present for example in XML, 
then by means of XSL Style sheets an HTML document can be generated, which can be 
displayed by means of a web browser. The generated graphics display is subsequently 
divided into n rows and m columns, so that a matrix with n x m fields results. Thus n x m 

20 fields are clearly defined. The fields can be saved in a usual image format (JPEG, GIF or 
similar). A now happens to select a field and sends it with the specification of the 
appropriate line and column number to B. B receives the field, arranges it at the right 
position in the matrix and displays it on the display. Now B sends the field to A, which is at 
the same position as the field just received from A. A receives this field, arranges it at the 

25 right position in the matrix and displays it on the display. Now according to this pattern the 
exchange of the remaining fields takes place in analogous fashion. For A and B there is 
always the option of terminating the method prematurely and thus of aborting the 
information exchange. If one user has the impression that he can trust the other, then at any 
point of time in the exchange process he can offer to exchange the remainder of the image 

30 in one step in order to accelerate the process. If the other person consents, both transmit the 
still remaining fields in one step to the respective other person. 

In the example of application in accordance with Figs. 2 to 7 the method is 
clarified by way of example from the point of view of two users Peter and Vera. The image 
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generated from the personal information has a resolution of 300 x 300 pixels and was 
divided into 7x6 fields. Therefore, 42 fields are to be transmitted altogether, till the 
respective other user can see the image completely. Whereas the two users still cannot infer 
any coherent information (compare Fig. 4) after the exchange of 9 fields of the display, 
5 after the exchange of 24 images already section information such as size or hair color can 
be guessed (compare Fig. 5). After 37 fields (compare Fig. 6) already substantial 
information is exchanged, here for example the transmission of the remaining fields for the 
acceleration of the exchange process would be conceivable. If all 42 fields were exchanged, 
the users Peter and Vera in this case have the complete personal information of their 

10 counterparts (compare Fig. 7). The structuring of the information in this example of 

application is selected arbitrarily; naturally any other structure is possible. In the same way, 
personal images or technical drawings etcetera can also be exchanged. The method is 
applicable without modification for any data formats, in which the information to be 
exchanged is available. The recipient need not worry about how the data is to be presented 

15 to the user, since the sender already supplies images, which only need to be reproduced. 
The user detects quickly whether the supplied information is of interest to him. (With raw 
data this is substantially more difficult for him to find out, if necessary he has to wait till the 
data is transmitted completely.) As a result, aborting the information exchange at an early 
point of time is possible, so that it is ensured that the user does not reveal personal data 

20 without a service in retum. The user can stop the exchange process at any time. 

Furthermore, the use of the graphics format protects against machine analysis and 
subsequent processing of the personal data by a third party. 



